CVE-2006-1587

NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2006-04-03

Last modified

2024-08-07

Affected products

• Netbsd (Netbsd)

References

• http://secunia.com/advisories/19465
• http://securitytracker.com/id?1015847
• http://www.osvdb.org/24258
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25581